At the beginning of January, Gcore successfully mitigated a massive DDoS attack on a client using a free CDN plan. The attack involved several L3/L4 attacks with a peak volume of 650 Gbps, which exceeded the average bandwidth of similar attacks by 60 times. Attackers exploited over 2000 servers belonging to one of the top three cloud providers worldwide.
Gcore's distribution of infrastructure and a large number of peering partners played a significant role in mitigating the attacks. With over 11,000 peering partners, Gcore was able to absorb most of the traffic over private networks and reduce the amount of traffic that needed to be handled by the public internet. Gcore's large capacity, with over 500 servers located in data centers worldwide, also helped distribute the traffic across the network, with each server receiving only 1-2 Gbps, an insignificant load.
The attacks lasted for 15 minutes and consisted of three attacks with different vectors, including UDP flood, TCP ACK flood, and a mix of TCP and UDP. The attacks were performed from multiple non-spoofed IP addresses, which allowed specialists to identify that the attackers used 2,143 servers in 44 different regions, and all of the servers belonged to a single public cloud provider.
Gcore's CDN plan, combined with its powerful protection system, was able to filter out the malicious traffic, allowing the client's web application to remain available. This incident emphasizes the importance of using distributed content delivery networks such as the CDN and Cloud to protect against DDoS attacks. According to Gcore's experience, DDoS attacks will continue to grow year after year. In 2021, the attacks reached 300 Gbps, and by 2022, they had increased to 700 Gbps.
In conclusion, Gcore's successful mitigation of the 650 Gbps DDoS attack on a cloud provider demonstrates the importance of a distributed infrastructure and a large number of peering partners to mitigate DDoS attacks. It also highlights the need for businesses of all sizes to use distributed content delivery networks for protection against DDoS attacks.
Thank you for reading our blog today. We hope you found the information helpful and informative. If you enjoyed this blog, follow us on Twitter, Instagram, Linkedin, GitHub, Website, and Youtube for more exciting content and updates. If you have any questions or comments, please feel free to reach out to us. We would love to hear from you. Don't forget to share this with your friends and family who may also find this information useful. Thank you for your support and stay tuned for more!